The State of Kernel Self Protection Project by Kees Cook, Google

> But… till now they’ve hardly accomplished anything compared to what PaX/Grsecurity did, e.g. they ported some mitigations while introducing more (exploitable?) bugs or incomplete implementations That doesn't seem particularly charitable. Regardless of what you think of the Linux Foundation's marketing arm, the KSPP is not a bad thing. They seem to have a very different priority to PaX/Grsecurity, with an emphasis on things that have a clear technical/political/etc path to being enabled by default. I really enjoyed this talk about KSPP's agenda: ▶ this video

in “HardenedLinux: The way to the Ark” · View on HN

He gave two talks, the one he referenced in the article, "The State of Kernel Self Protection Project", is here: ▶ this video All the available videos from the Linux Security Summit are listed here: [link]

in “Security things in Linux v4.3” · View on HN

Here is Kees Cook talk from the Linux Security Summit, "The State of Kernel Self Protection Project", he makes the same analogy to car safety in his talk: ▶ this video All the available videos from the Linux Security Summit are listed here: [link]

in “Unsafe at any clock speed: Linux kernel security needs a rethink” · View on HN

Really?!? Then you should advise Google on what they are doing wrong. "The State of Kernel Self Protection Project by Kees Cook, Google" ▶ this video

in “Proposal: A built-in Go error check function, try” · View on HN